Menu

Category Archives: Security

Articles about security

New mozilla-thunderbird packages are available for Slackware 14.2 and -current to fix security issues.

Cisco Webex Bug Allows Remote Code Execution
Lifeline Assistance Phone Users Targeted with ‘Uninstallable’ Adware
Graham Cluley on the Totally Unprepared Politics podcast
Amazon Ring fired staff for snooping on customers’ security videos
Hackers using Drake’s kiki do you love me to drop Lokibot malware
National Lottery Sentry MBA hacker given nine months in jail after swiping just £5

An update that fixes 7 vulnerabilities is now available.

An update that solves one vulnerability and has three fixes is now available.

Reading Time: ~ 2 min. Snake Ransomware Slithers Through Networks A new ransomware variant, dubbed “Snake,” has been found using more sophisticated obfuscation while targeting entire networks, rather than only one machine. In addition, Snake will append any encrypted file extensions with five random characters following the filetype itself. Finally, the infection also modifies a […]

Oil-and-Gas APT Pivots to U.S. Power Plants
Just one month later, the Currys PC World/Dixons Travel hack would have cost them a heck of a lot more

An update that solves one vulnerability and has 5 fixes is now available.

An update that fixes 7 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes three vulnerabilities is now available.

Ding-dong: Cisco delivers your Patch Tuesday warm-up with WebEx, IOS fixes for a few irritating security holes
Cryptojacked routers reduce by 78% in SE Asia following Operation Goldfish Alpha
Google scolded for depriving the poor of privacy after Chinese malware bundled on phones for hard-up Americans
SideWinder hackers hit Android users with malware apps on Play Store
Why is a 22GB database containing 56 million US folks’ personal details sitting on the open internet using a Chinese IP address? Seriously, why?
Exploit Fully Breaks SHA-1, Lowers the Attack Bar
Dixons fined £500,000 by ICO for crap security that exposed 5.6 million customers’ payment cards
4 Ring Employees Fired For Spying on Customers
Stop everything. Update Firefox now
California’s Tough New Privacy Law and Its Biggest Challenges
Man jailed for using webcam RAT to spy on women in their bedrooms

An update that solves 9 vulnerabilities and has one errata is now available.

It was found that sa-exim, the SpamAssassin filter for Exim, allows attackers to execute arbitrary code if users are allowed to run custom rules. A similar issue was fixed in spamassassin, CVE-2018-11805, which caused a functional regression in sa-exim. This update restores the

Mozilla rushes out patch for Firefox zero‑day

The US cybersecurity agency warns that the critical vulnerability could allow attackers to take control of people’s computers The post Mozilla rushes out patch for Firefox zero‑day appeared first on WeLiveSecurity

TrickBot Adds Custom, Stealthy Backdoor to its Arsenal

An update that fixes one vulnerability is now available.

An update that fixes 11 vulnerabilities is now available.

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

Smashing Security #160: SNAFUs! MS Word, Amazon Ring, and TikTok

security update

Drake Lyrics Used as Calling Card in Malware Attack
Hash snag: Security shamans shame SHA-1 standard, confirm crucial collisions citing circa $45k chip cost
In a desperate bid to stay relevant in 2020’s geopolitical upheaval, N. Korea upgrades its Apple Jeus macOS malware

security update

Man Sentenced in ATM Skimming Conspiracy
Google Ditches Patch-Time Bug Disclosure in Favor of 90-Day Policy
Why small business corporations fall easy prey to hackers
CES – Taking a smart city for a test drive

No one has a road map for securing a connected city – but there should be a whole atlas of such maps The post CES – Taking a smart city for a test drive appeared first on WeLiveSecurity

Liverpool Voyeur Used IM-RAT to Video Women at Home
Mozilla Updates Firefox Browser: Zero-Day Bug Patched, Fingerprinting Nixed
TikTok on the clock, and the hacking won’t stop: SMS spoofing vuln let baddies twiddle teens’ social media videos
TikTok vulnerability allowed hackers to send SMS with malware
TikTok Riddled With Security Flaws
Get Ready for the Microsoft Windows 7 EOL on January 14th
City of Las Vegas wakes up to a cyber attack

An update that solves 9 vulnerabilities and has two fixes is now available.

An update that fixes three vulnerabilities is now available.

An update that fixes 11 vulnerabilities is now available.

The package firefox before version 72.0-1 is vulnerable to multiple issues including arbitrary code execution, insufficient validation, access restriction bypass and denial of service.

What if everyone just said ‘Nah’ to tracking?
“Planned maintenance”? Travelex’s masterclass in how not to respond to a cyberattack

ClamAV could be made to crash if it opened a specially crafted file.

Several security issues were fixed in the kernel.

The Six Million Dollar Scam: London cops probe Travelex cyber-ransacking amid reports of £m ransomware demand, wide-open VPN server holes
If at first you don’t succeed, pry, pry again: Feds once again demand Apple unlock encrypted iPhones in yet another terrorism case

security update

That Pulse Secure VPN you’re using to protect your data? Better get it patched – or it’s going to be ransomware time
Google Fixes Critical Android RCE Flaw
Yeah, says Google Project Zero, when you think about it, going public with exploit deets immediately after a patch is emitted isn’t such a great idea
Encryption: An Essential Yet Highly Controversial Component of Digital Security>
Sodinokibi Ransomware Behind Travelex Fiasco: Report
Accenture pays for CSS injection from Symantec parent Broadcom: Yep, it bought its cybersecurity arm
Hackers steal sensitive data from Japanese search engine for sex hotels
Facebook bans deepfakes but not all altered content

Footage defined as parody or satire will be permitted, as the social network isn’t slamming the door on all types of manipulated media The post Facebook bans deepfakes but not all altered content appeared first on WeLiveSecurity

FBI Taps Apple to Unlock Pensacola Shooter’s iPhone
Facebook Cracks Down on Deepfake Videos
Wheelie bad end to 2019 for Canyon Bicycles as hackers puncture IT systems

An update that fixes one vulnerability is now available.

An update that fixes one vulnerability is now available.

An update that fixes 17 vulnerabilities is now available.

An update that fixes 16 vulnerabilities is now available.

An update that solves one vulnerability and has one errata is now available.

I’m the queen of Gibraltar and will never get a traffic ticket… just two of the things anyone could have written into country’s laws thanks to unsanitised SQL input vuln

An update that fixes four vulnerabilities is now available.

Here we go again: Software nasties slip into Google Play, exploit make-me-root Android flaw for maximum pwnage
ToTok Returned to Google Play Despite ‘Spy Tool’ Claims
Magecart Hits Parents and Students via Blue Bear Attack
Cyber-warnings, cyber-speculation over cyber-Iran’s cyber-retaliation cyber-plans post-Soleimani assassination

Risk Level: Very Low. Type: Trojan.

DeathRansom Campaign Linked to Malware Cornucopia
GCHQ: A cyber-what-now? Rumours of our probe into London Stock Exchange ‘cyberattack’ have been greatly exaggerated
Hackers Deface U.S. Gov Website With Pro-Iran Messages

It was discovered that there were three vulnerabilities in Pillow, an imaging library for the Python programming language: * CVE-2019-19911: Prevent a denial-of-service vulnerability caused

Download AV-Comparatives real-world test into how well different security products defend against APTs
Company held hostage by ransomware shuts down, tells 300 employees to find new jobs
Travelex still offline after discovering malware on New Year’s Eve, and other banks’ currency services are also affected
Tune in this month: What every small-to-medium biz can do to fend off cyber-crooks

An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability

An update for kpatch-patch is now available for Red Hat Enterprise Linux 7.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score,

Rowhammer rides again as FPGA attack, RSA again reportedly up for sale, anti-theft kit to nuke laptops, etc
Iranian hackers deface US government & African bank website

Updated compat-openssl10 and openssl packages fix security vulnerability: There is an overflow bug in the x64_64 Montgomery squaring procedure used in exponentiation with 512-bit moduli. No EC algorithms are affected. Analysis suggests that attacks against 2-prime RSA1024, 3-prime RSA1536,